Skip to content

CVE-2014-9148 Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct r...

CriticalCVSS 9.8 EPSS 11.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super administrator function via the view parameter in a direct request to fiyo/dapur.

Affected products

ProductAffected versionsFixed in
fiyo cms <= 2.0.1.8 No fix listed

References

  • packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
  • 73437 third-party-advisory vdb-entry
  • 36581 exploit issue-tracking third-party-advisory vdb-entry